BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 243s! INFO: task kworker/u4:0:5 blocked for more than 140 seconds. Not tainted 4.14.71+ #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:0 D26384 5 2 0x80000000 Workqueue: events_unbound fsnotify_mark_destroy_workfn Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_timeout+0x710/0xe60 kernel/time/timer.c:1721 do_wait_for_common kernel/sched/completion.c:91 [inline] __wait_for_common kernel/sched/completion.c:112 [inline] wait_for_common+0x3bc/0x4e0 kernel/sched/completion.c:123 __synchronize_srcu+0x121/0x200 kernel/rcu/srcutree.c:898 fsnotify_mark_destroy_workfn+0xfc/0x310 fs/notify/mark.c:757 process_one_work+0x86e/0x15c0 kernel/workqueue.c:2114 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248 kthread+0x348/0x420 kernel/kthread.c:232 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402 INFO: task kworker/u4:1:64 blocked for more than 140 seconds. Not tainted 4.14.71+ #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. kworker/u4:1 D25600 64 2 0x80000000 Workqueue: events_unbound fsnotify_connector_destroy_workfn Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_timeout+0x710/0xe60 kernel/time/timer.c:1721 do_wait_for_common kernel/sched/completion.c:91 [inline] __wait_for_common kernel/sched/completion.c:112 [inline] wait_for_common+0x3bc/0x4e0 kernel/sched/completion.c:123 __synchronize_srcu+0x121/0x200 kernel/rcu/srcutree.c:898 fsnotify_connector_destroy_workfn+0x3f/0xa0 fs/notify/mark.c:156 process_one_work+0x86e/0x15c0 kernel/workqueue.c:2114 worker_thread+0xdc/0x1000 kernel/workqueue.c:2248 kthread+0x348/0x420 kernel/kthread.c:232 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402 INFO: task syz-executor1:1846 blocked for more than 140 seconds. Not tainted 4.14.71+ #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor1 D27328 1846 1 0x00000004 Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893 xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 get_info+0x10c/0x570 net/ipv6/netfilter/ip6_tables.c:983 do_ip6t_get_ctl+0x132/0x7a0 net/ipv6/netfilter/ip6_tables.c:1709 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x68/0xd0 net/netfilter/nf_sockopt.c:122 ipv6_getsockopt+0x16e/0x210 net/ipv6/ipv6_sockglue.c:1369 tcp_getsockopt+0x80/0xc0 net/ipv4/tcp.c:3240 SYSC_getsockopt net/socket.c:1895 [inline] SyS_getsockopt+0x126/0x200 net/socket.c:1877 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45a1aa RSP: 002b:00007fff0d1541c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007fff0d1541f0 RCX: 000000000045a1aa RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 RBP: 0000000000709cc0 R08: 00007fff0d1541ec R09: 0000000000004000 R10: 00007fff0d1541f0 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000707b00 INFO: task syz-executor0:1847 blocked for more than 140 seconds. Not tainted 4.14.71+ #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor0 D27144 1847 1 0x00000004 Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893 xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 get_info+0x10c/0x570 net/ipv6/netfilter/ip6_tables.c:983 do_ip6t_get_ctl+0x132/0x7a0 net/ipv6/netfilter/ip6_tables.c:1709 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x68/0xd0 net/netfilter/nf_sockopt.c:122 ipv6_getsockopt+0x16e/0x210 net/ipv6/ipv6_sockglue.c:1369 tcp_getsockopt+0x80/0xc0 net/ipv4/tcp.c:3240 SYSC_getsockopt net/socket.c:1895 [inline] SyS_getsockopt+0x126/0x200 net/socket.c:1877 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45a1aa RSP: 002b:00007ffd036c6cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007ffd036c6cf0 RCX: 000000000045a1aa RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 RBP: 0000000000709cc0 R08: 00007ffd036c6cec R09: 0000000000004000 R10: 00007ffd036c6cf0 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000707b00 INFO: task syz-executor2:1848 blocked for more than 140 seconds. Not tainted 4.14.71+ #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor2 D26656 1848 1 0x00000004 Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893 xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 get_info+0x10c/0x570 net/ipv6/netfilter/ip6_tables.c:983 do_ip6t_get_ctl+0x132/0x7a0 net/ipv6/netfilter/ip6_tables.c:1709 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x68/0xd0 net/netfilter/nf_sockopt.c:122 ipv6_getsockopt+0x16e/0x210 net/ipv6/ipv6_sockglue.c:1369 tcp_getsockopt+0x80/0xc0 net/ipv4/tcp.c:3240 SYSC_getsockopt net/socket.c:1895 [inline] SyS_getsockopt+0x126/0x200 net/socket.c:1877 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45a1aa RSP: 002b:00007ffd34200f58 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007ffd34200f80 RCX: 000000000045a1aa RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 RBP: 0000000000709cc0 R08: 00007ffd34200f7c R09: 0000000000004000 R10: 00007ffd34200f80 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000707b00 INFO: task syz-executor5:1849 blocked for more than 140 seconds. Not tainted 4.14.71+ #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor5 D27144 1849 1 0x00000004 Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893 xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 get_info+0x10c/0x570 net/ipv6/netfilter/ip6_tables.c:983 do_ip6t_get_ctl+0x132/0x7a0 net/ipv6/netfilter/ip6_tables.c:1709 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x68/0xd0 net/netfilter/nf_sockopt.c:122 ipv6_getsockopt+0x16e/0x210 net/ipv6/ipv6_sockglue.c:1369 tcp_getsockopt+0x80/0xc0 net/ipv4/tcp.c:3240 SYSC_getsockopt net/socket.c:1895 [inline] SyS_getsockopt+0x126/0x200 net/socket.c:1877 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45a1aa RSP: 002b:00007fffa41bd7c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007fffa41bd7f0 RCX: 000000000045a1aa RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 RBP: 0000000000709cc0 R08: 00007fffa41bd7ec R09: 0000000000004000 R10: 00007fffa41bd7f0 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000707b00 INFO: task syz-executor4:1851 blocked for more than 140 seconds. Not tainted 4.14.71+ #8 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor4 D27128 1851 1 0x00000004 Call Trace: schedule+0x7f/0x1b0 kernel/sched/core.c:3490 schedule_preempt_disabled+0x13/0x20 kernel/sched/core.c:3548 __mutex_lock_common kernel/locking/mutex.c:833 [inline] __mutex_lock+0x521/0x1480 kernel/locking/mutex.c:893 xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 get_info+0x10c/0x570 net/ipv6/netfilter/ip6_tables.c:983 do_ip6t_get_ctl+0x132/0x7a0 net/ipv6/netfilter/ip6_tables.c:1709 nf_sockopt net/netfilter/nf_sockopt.c:104 [inline] nf_getsockopt+0x68/0xd0 net/netfilter/nf_sockopt.c:122 ipv6_getsockopt+0x16e/0x210 net/ipv6/ipv6_sockglue.c:1369 tcp_getsockopt+0x80/0xc0 net/ipv4/tcp.c:3240 SYSC_getsockopt net/socket.c:1895 [inline] SyS_getsockopt+0x126/0x200 net/socket.c:1877 do_syscall_64+0x19b/0x4b0 arch/x86/entry/common.c:289 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45a1aa RSP: 002b:00007ffef94aeef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 RAX: ffffffffffffffda RBX: 00007ffef94aef20 RCX: 000000000045a1aa RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 RBP: 0000000000709cc0 R08: 00007ffef94aef1c R09: 0000000000004000 R10: 00007ffef94aef20 R11: 0000000000000246 R12: 0000000000000003 R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000707b00 Showing all locks held in the system: 2 locks held by kworker/u4:0/5: #0: ("events_unbound"){+.+.}, at: [] process_one_work+0x787/0x15c0 kernel/workqueue.c:2085 #1: ((reaper_work).work){+.+.}, at: [] process_one_work+0x7bf/0x15c0 kernel/workqueue.c:2089 1 lock held by khungtaskd/23: #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x74/0x20f kernel/locking/lockdep.c:4541 2 locks held by kworker/u4:1/64: #0: ("events_unbound"){+.+.}, at: [] process_one_work+0x787/0x15c0 kernel/workqueue.c:2085 #1: (connector_reaper_work){+.+.}, at: [] process_one_work+0x7bf/0x15c0 kernel/workqueue.c:2089 1 lock held by rsyslogd/1631: #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xa2/0xc0 fs/file.c:768 2 locks held by getty/1759: #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x20/0x80 drivers/tty/tty_ldisc.c:275 #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1ff/0x15e0 drivers/tty/n_tty.c:2142 1 lock held by syz-executor1/1846: #0: (&xt[i].mutex){+.+.}, at: [] xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 1 lock held by syz-executor0/1847: #0: (&xt[i].mutex){+.+.}, at: [] xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 1 lock held by syz-executor2/1848: #0: (&xt[i].mutex){+.+.}, at: [] xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 1 lock held by syz-executor5/1849: #0: (&xt[i].mutex){+.+.}, at: [] xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 1 lock held by syz-executor4/1851: #0: (&xt[i].mutex){+.+.}, at: [] xt_find_table_lock+0x35/0x3d0 net/netfilter/x_tables.c:1092 ============================================= NMI backtrace for cpu 1 CPU: 1 PID: 23 Comm: khungtaskd Not tainted 4.14.71+ #8 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xb9/0x11b lib/dump_stack.c:53 nmi_cpu_backtrace.cold.0+0x47/0x85 lib/nmi_backtrace.c:101 nmi_trigger_cpumask_backtrace+0x121/0x146 lib/nmi_backtrace.c:62 trigger_all_cpu_backtrace include/linux/nmi.h:138 [inline] check_hung_uninterruptible_tasks kernel/hung_task.c:196 [inline] watchdog+0x574/0xa70 kernel/hung_task.c:252 kthread+0x348/0x420 kernel/kthread.c:232 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:402 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 PID: 9137 Comm: syz-executor0 Not tainted 4.14.71+ #8 task: ffff8801cf1d2f00 task.stack: ffff8801d3120000 RIP: 0010:inb arch/x86/include/asm/io.h:309 [inline] RIP: 0010:io_serial_in+0x60/0x80 drivers/tty/serial/8250/8250_port.c:450 RSP: 0000:ffff8801dba078f0 EFLAGS: 00000002 RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 RDX: 00000000000003fd RSI: 0000000000000005 RDI: ffffffffbbd1d998 RBP: ffffffffbbd1d960 R08: 1ffffffff7644b01 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000020 R13: fffffbfff77a3b72 R14: fffffbfff77a3b35 R15: ffffffffbbd1db92 FS: 00007f2344409700(0000) GS:ffff8801dba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000017cf978 CR3: 00000001c8eca005 CR4: 00000000001606b0 DR0: 00000000200001c0 DR1: 00000000200001c0 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: serial_in drivers/tty/serial/8250/8250.h:115 [inline] wait_for_xmitr+0x90/0x1e0 drivers/tty/serial/8250/8250_port.c:2032 serial8250_console_putchar+0x19/0x50 drivers/tty/serial/8250/8250_port.c:3184 uart_console_write+0x4b/0xd0 drivers/tty/serial/serial_core.c:1883 serial8250_console_write+0x51b/0x800 drivers/tty/serial/8250/8250_port.c:3250 call_console_drivers kernel/printk/printk.c:1574 [inline] console_unlock+0x5b9/0xb50 kernel/printk/printk.c:2242 vprintk_emit+0x112/0x150 kernel/printk/printk.c:1766 vprintk_func+0x58/0x159 kernel/printk/printk_safe.c:401 printk+0xa7/0xcf kernel/printk/printk.c:1838 wq_watchdog_timer_fn.cold.24+0x4b/0x70 kernel/workqueue.c:5473 call_timer_fn+0x163/0x6a0 kernel/time/timer.c:1279 expire_timers+0x1f3/0x4a0 kernel/time/timer.c:1318 __run_timers kernel/time/timer.c:1634 [inline] run_timer_softirq+0x3a5/0x560 kernel/time/timer.c:1649 __do_softirq+0x215/0x997 kernel/softirq.c:288 invoke_softirq kernel/softirq.c:368 [inline] irq_exit+0x10f/0x150 kernel/softirq.c:409 exiting_irq arch/x86/include/asm/apic.h:648 [inline] smp_apic_timer_interrupt+0x188/0x5f0 arch/x86/kernel/apic/apic.c:1064 apic_timer_interrupt+0x84/0x90 arch/x86/entry/entry_64.S:787 RIP: 0033:0x40157b RSP: 002b:00007f2344408690 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff10 RAX: 000000004cbf8894 RBX: 0000000000000007 RCX: 0000000000457679 RDX: 0000000000000000 RSI: 00007f23444086c0 RDI: 0000000000000007 RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004d7950 R14: 00000000004c48c6 R15: 0000000000000000 Code: 30 0f b6 8d d1 00 00 00 48 8d 7d 38 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 d3 e3 80 3c 02 00 75 13 03 5d 38 89 da ec <0f> b6 c0 5b 5d c3 e8 15 df 7d ff eb c9 e8 3e df 7d ff eb e6 66